General

  • Target
    10raas.exe
  • Size 32.7MB
  • Sample261107-r2ahssfb79
  • SHA256 d58da07fe5bb04721097560865eb2f8b7108a92eb3313e2e9eda630fb24c2e9f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      10raas.exe
    • Size 32.7MB
    • SHA256 d58da07fe5bb04721097560865eb2f8b7108a92eb3313e2e9eda630fb24c2e9f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Renames multiple (633) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops desktop.ini file(s)

    • Hide Artifacts: Hidden Files and Directories

MITRE ATT&CK Enterprise v16

Tasks